This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3137352e35382e302f32342d3234203d3e203633343733.roa File: 3138352e3137352e35382e302f32342d3234203d3e203633343733.roa (raw, json) Hash identifier: K9th11PH/og4G46NPVOizWWADHR2x8b0M5SK9Gejftg= Subject key identifier: CD:50:F5:7A:D2:30:DA:DC:94:C7:13:FE:EC:72:1C:E0:3D:4B:C9:63 Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a Certificate serial: 538D5F4DA9D52E44B6DE1F103804F42AB895262D Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3137352e35382e302f32342d3234203d3e203633343733.roa Signing time: Mon 01 Dec 2025 15:50:07 +0000 ROA not before: Mon 01 Dec 2025 15:45:07 +0000 ROA not after: Mon 30 Nov 2026 15:50:07 +0000 asID: 63473 IP address blocks: 185.175.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.mft rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:8d:5f:4d:a9:d5:2e:44:b6:de:1f:10:38:04:f4:2a:b8:95:26:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a Validity Not Before: Dec 1 15:45:07 2025 GMT Not After : Nov 30 15:50:07 2026 GMT Subject: CN=CD50F57AD230DADC94C713FEEC721CE03D4BC963 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:28:da:93:0c:f2:04:fc:75:a7:3e:71:c5:d1: dc:f1:9b:f0:96:32:80:ab:af:8a:b9:1e:d9:33:65: 85:b7:43:c1:e1:22:7a:43:95:6e:3a:3d:05:16:5f: 8a:51:f5:72:1a:24:a1:44:1f:36:df:c2:5d:78:2a: 66:29:2b:16:8a:97:d9:5f:1d:37:d9:2b:23:f7:cf: bd:52:17:5d:cf:a3:f3:21:07:74:10:00:11:b4:c8: ba:ec:b2:16:d3:50:2c:57:c8:8d:e9:3d:66:46:e1: a1:88:e1:4c:a4:cb:91:4f:3a:81:fb:30:c3:0c:f0: 55:09:f3:86:41:c0:df:a8:dd:9d:b5:d8:8a:6e:11: 2b:a2:02:23:cb:5e:b1:04:05:85:d5:45:6f:8f:47: 91:6c:2e:8e:24:cd:36:0e:57:3f:f3:d4:70:2f:35: 83:a4:96:4a:02:b9:7e:c6:e5:c1:aa:65:26:a2:33: 1d:19:73:09:03:31:66:cb:fa:08:5c:f0:af:df:c7: cd:38:9c:92:f3:22:86:d1:0a:fa:13:da:2c:96:fd: 1a:ed:f7:84:78:1f:ad:bc:2c:e0:f2:f7:f0:e3:fc: b1:32:07:4a:86:4d:e5:e5:c2:75:50:2b:83:ca:aa: 51:93:98:35:a1:ba:e8:06:e3:d5:3a:bd:83:2d:53: a0:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:50:F5:7A:D2:30:DA:DC:94:C7:13:FE:EC:72:1C:E0:3D:4B:C9:63 X509v3 Authority Key Identifier: keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3137352e35382e302f32342d3234203d3e203633343733.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.175.58.0/24 Signature Algorithm: sha256WithRSAEncryption 93:34:0d:3c:27:cc:9f:12:1a:a2:ed:d0:28:68:2d:03:e1:e3: b8:f3:1b:f6:c6:e2:10:07:07:c8:1c:0b:f3:c8:04:22:1f:ae: 41:44:e0:96:f6:26:be:67:d4:d3:6e:11:fe:e9:c4:8a:af:66: a3:01:c6:41:56:c8:42:0f:c6:ad:12:a9:76:7b:5f:08:cd:72: e9:8a:8e:f4:45:95:aa:c7:b8:d4:4c:d7:22:da:1f:2a:54:e7: 76:93:5d:a7:19:90:dd:ae:df:3a:00:60:70:13:a5:4d:42:d8: cc:61:4d:34:0d:50:b4:4f:d4:0a:53:19:3b:f7:27:ce:80:99: ff:2b:2e:c8:63:08:1e:11:40:da:79:09:72:ad:6b:8d:47:c6: 09:89:50:c6:31:8d:d7:72:c8:33:3d:54:e3:07:e0:b6:30:10: 6f:40:88:47:e4:c9:ad:d5:71:75:7f:6d:b0:d6:06:62:30:f3: 5b:06:d4:a4:df:52:cb:24:9e:7f:04:d7:c2:27:40:87:bc:ed: d9:ee:10:26:72:97:fb:ca:09:a0:37:4e:b7:fd:6f:49:c9:d6: 3f:10:da:f7:52:e6:fa:89:46:8d:61:06:38:dc:63:f0:67:d7: e1:7d:e9:d9:10:93:7a:7c:22:a4:73:3a:c6:9d:3d:a9:0a:b9: 73:ae:ac:5e -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUU41fTanVLkS23h8QOAT0KriVJi0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDg4NDY5ZDFhMzMwODVmZjg4YjNlNTk5ZDIyM2NhNzRj MjMxM2EzYTAeFw0yNTEyMDExNTQ1MDdaFw0yNjExMzAxNTUwMDdaMDMxMTAvBgNV BAMTKENENTBGNTdBRDIzMERBREM5NEM3MTNGRUVDNzIxQ0UwM0Q0QkM5NjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0KNqTDPIE/HWnPnHF0dzxm/CW MoCrr4q5HtkzZYW3Q8HhInpDlW46PQUWX4pR9XIaJKFEHzbfwl14KmYpKxaKl9lf HTfZKyP3z71SF13Po/MhB3QQABG0yLrsshbTUCxXyI3pPWZG4aGI4Uyky5FPOoH7 MMMM8FUJ84ZBwN+o3Z212IpuESuiAiPLXrEEBYXVRW+PR5FsLo4kzTYOVz/z1HAv NYOklkoCuX7G5cGqZSaiMx0ZcwkDMWbL+ghc8K/fx804nJLzIobRCvoT2iyW/Rrt 94R4H628LODy9/Dj/LEyB0qGTeXlwnVQK4PKqlGTmDWhuugG49U6vYMtU6DXAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUzVD1etIw2tyUxxP+7HIc4D1LyWMwHwYDVR0j BBgwFoAUCIRp0aMwhf+Is+WZ0iPKdMIxOjowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzUvMDg4NDY5RDFBMzMwODVGRjg4QjNFNTk5RDIyM0NBNzRDMjMxM0EzQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NJUnAwYU13aGYtSXMtV1owaVBLZE1J eE9qby5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzUvMzEzODM1MmUzMTM3MzUyZTM1 MzgyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNjMzMzQzNzMzLnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA ua86MA0GCSqGSIb3DQEBCwUAA4IBAQCTNA08J8yfEhqi7dAoaC0D4eO48xv2xuIQ BwfIHAvzyAQiH65BROCW9ia+Z9TTbhH+6cSKr2ajAcZBVshCD8atEql2e18IzXLp io70RZWqx7jUTNci2h8qVOd2k12nGZDdrt86AGBwE6VNQtjMYU00DVC0T9QKUxk7 9yfOgJn/Ky7IYwgeEUDaeQlyrWuNR8YJiVDGMY3XcsgzPVTjB+C2MBBvQIhH5Mmt 1XF1f22w1gZiMPNbBtSk31LLJJ5/BNfCJ0CHvO3Z7hAmcpf7ygmgN063/W9JydY/ ENr3Uub6iUaNYQY43GPwZ9fhfenZEJN6fCKkczrGnT2pCrlzrqxe -----END CERTIFICATE-----Generated at Sat Dec 6 14:08:09 2025 by rpki-client